It is currently Wed Nov 21, 2018 9:47 am


Kaspersky Warning of Attack

Discuss security related topics in here (Hacking, Cracking, and Protecting)
Do not post HJT Logs here

Moderator: PCguy

Kaspersky Warning of Attack

Postby PartyBoy » Sun Mar 29, 2009 12:11 am

Should I be concerned and do I need to do anything about it.

For a while now I get a red box warning in the bottom right corner by Kaspersky advising of an attack. I have opened up the program and looked at the report file. Here are the attacks (red warning symbol) from the last few days. As you can see, they are quite frequent and all using the same port:

23/03/2009 18:10:32 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 221.233.242.4. Protocol/service: UDP on local port 1434. Time: 23/03/2009 18:10:32

24/03/2009 11:18:54 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.23.37.51. Protocol/service: UDP on local port 1434. Time: 24/03/2009 11:18:54

24/03/2009 11:40:23 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 10.13.3.61. Protocol/service: UDP on local port 1434. Time: 24/03/2009 11:40:23

24/03/2009 13:05:14 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 193.189.114.136. Protocol/service: UDP on local port 1434. Time: 24/03/2009 13:05:14

24/03/2009 14:02:00 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 58.241.69.52. Protocol/service: UDP on local port 1434. Time: 24/03/2009 14:02:00

24/03/2009 16:12:25 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.98.106.53. Protocol/service: UDP on local port 1434. Time: 24/03/2009 16:12:25

25/03/2009 10:41:04 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 59.173.247.106. Protocol/service: UDP on local port 1434. Time: 25/03/2009 10:41:04

25/03/2009 12:19:06 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 202.99.11.99. Protocol/service: UDP on local port 1434. Time: 25/03/2009 12:19:06

25/03/2009 12:19:06 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 202.99.11.99. Protocol/service: UDP on local port 1434. Time: 25/03/2009 12:19:06

25/03/2009 14:26:37 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.95.47.83. Protocol/service: UDP on local port 1434. Time: 25/03/2009 14:26:37

25/03/2009 15:01:53 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 61.139.54.94. Protocol/service: UDP on local port 1434. Time: 25/03/2009 15:01:53

25/03/2009 15:25:21 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.108.28.238. Protocol/service: UDP on local port 1434. Time: 25/03/2009 15:25:21

25/03/2009 18:08:38 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 10.10.10.2. Protocol/service: UDP on local port 1434. Time: 25/03/2009 18:08:38

25/03/2009 18:38:21 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 219.138.39.22. Protocol/service: UDP on local port 1434. Time: 25/03/2009 18:38:21

28/03/2009 22:42:34 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 59.173.247.106. Protocol/service: UDP on local port 1434. Time: 28/03/2009 22:42:34

28/03/2009 23:05:10 Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 202.99.11.99. Protocol/service: UDP on local port 1434. Time: 28/03/2009 23:05:10



I have performed a full virus scan, and full scans using ad-aware, spybot and Malwarebytes' Anti-Malware yet nothing noteworthy has been found.

I would appreciate any help or re-assurance

thanks
User avatar
PartyBoy
Geek
Geek
 
Posts: 54
Joined: Tue Aug 12, 2003 1:00 am

Thanks given:0
Thanks received:0
Top

Re: Kaspersky Warning of Attack

Postby parinetax » Tue Dec 27, 2011 10:37 am

What can i do to install a fresh copy of Kaspersky? I had a virus that messed my copy, now it's gone but made a error in Kaspersky that i can't get rid of even if i uninstall the program and reinstall it. I used programs like CCleaner and so on to clean my registry but i has no effect so can anyone help me?
_____________________________
market samurai ~ marketsamurai ~ marketsamurai.com
parinetax
Newbie
Newbie
 
Posts: 2
Joined: Thu Dec 22, 2011 11:13 am

Thanks given:0
Thanks received:0
Top


Return to Security

Who is online

Users browsing this forum: No registered users and 3 guests

cron